Job description

About the team Turo is searching for a highly motivated and versatile Sr. Security Engineer to spearhead our efforts in securing enterprise systems and data through the architecture, design, and continuous improvement of a comprehensive security framework. This role will focus heavily on leading the deployment of Zero Trust principles across the organization, ensuring the integrity of our systems, and protecting against emerging threats. The successful candidate will be a subject matter expert in these domains, possess a proactive mindset for staying ahead of potential threats, and serve as a technical mentor to junior team members. What you will do Lead the architecture and implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models. Architect, develop, and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks. Deploy, maintain, and design policies for Data Loss Prevention (DLP) and Insider Threat prevention technologies to mitigate risks from internal and external actors. Partner closely with IT Engineering on Identity and Access Governance solutions (e.g., Okta, IGA workflows) to enforce secure and efficient access control policies across the organization. Lead the technical side of compliance audits, executing deep gap assessments for SOX and SOC 2 standards. Champion and drive the adoption of Infrastructure as Code (IaC) specifically using Terraform, to automate security configurations across the enterprise cloud stack. Lead Incident Response efforts for enterprise security, developing advanced automation playbooks (e.g., Tines), conducting root-cause analyses, and guiding the incident response team during critical events. Establish and maintain a robust SaaS Security Posture to ensure third-party services are securely integrated. Mentor and provide technical guidance to mid-level security engineers and IT partners. Your profile 5 years of experience in enterprise security, with a proven track record in Zero Trust, DLP, and Endpoint Security. Proven experience in architecture design and hands-on deployment of enterprise-wide security platforms. High proficiency in scripting and automating custom security processes using Python, Go, or PowerShell. Advanced experience with configuration management and infrastructure as code tools (e.g., Terraform). Industry certifications such as CISSP, CISM, or GIAC are highly preferred. For this role, the target base salary range in San Francisco is $148k - $185k annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role. Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. We encourage you to talk with your recruiter to learn more about the total compensation and benefits available for this role. Turo highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Turists will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Your recruiter can share more information about the various in-office perks Turo offers. Turo Recruiting Scam Alert: We’ve learned that there are scammers targeting job candidates by impersonating Turo and its employees. We ask candidates to be careful of fraudulent job postings or suspicious recruiting activity during their job search, especially if they’re contacted through unofficial channels (such as Instagram, Telegram, MS Teams, etc.). In general, Turo interacts with candidates through our Careers page and via turo.com email addresses, and we don’t ask candidates for sensitive financial or personal info or request money as part of the hiring process (so an application fee or equipment costs). If candidates are not sure whether they’re dealing with an impersonator, they can contact Turo’s Recruiting Team at recruit turo.com . Candidates can also report suspicious activity to the FTC or other appropriate authorities. Turo AI Policy: Turo may use AI-enabled tools to support our recruiting operations, including gathering information from candidates, drafting communications, helping with interview note-taking and assessment, and so on. These tools only supplement our team; all decisions to advance or hire candidates are made by Turo employees. While we welcome candidates to use AI-enabled tools to help prepare for their interviews, the use of such tools, including any AI chatbots or note-takers, is not permitted during live interviews or technical assessments. We want to see how you consider and solve problems in real-time, so interviews and assessments are all you (unless we indicate otherwise and ask you specifically to use an AI-enabled tool to answer a question). If during the application process you require the use of an AI-enabled tool as a reasonable accommodation for a disability, please let us know at PeopleOps turo.com . Benefits Competitive salary, equity, benefits, and perks for all full-time employees Employer-paid medical, dental, and vision insurance (Country specific) Retirement employer match Learning & Development stipend to invest in your professional development Turo host matching program Turo travel credit Cell phone and internet stipend Paid time off to relax and recharge Paid holidays, volunteer time off, and parental leave For those who are in the office full-time or hybrid we have in-office lunch, office snacks, and fun activities We are committed to building a diverse team. If you are from a background that s underrepresented in tech, we d love to meet you. Aside from an award winning work environment and the opportunity to be part of the world’s largest car sharing marketplace, we are also growing the team quickly - join us! Even if you don t meet every qualification, we are looking for people with enthusiasm for what we do and we will consider you for this and other possibilities. About Turo Turo is the world’s largest car sharing marketplace where you can book the perfect car for wherever you’re going from a vibrant community of trusted hosts across the US, UK, Canada, Australia, and France. Whether you re flying in from afar or looking for a car down the street, searching for a rugged truck or something smooth and swanky, Turo puts you in the driver s seat of an extraordinary selection of cars shared by local hosts. Discover Turo at turo.com , the App Store, and Google Play, and check out our blog, Field Notes . Read more about the Turo culture according to Turo CEO, Andre Haddad. Turo is an Equal Opportunity Employer and a participant in the U.S. Federal E-Verify program. Women, minorities, individuals with disabilities and protected veterans are encouraged to apply. We welcome people of different backgrounds, experiences, abilities and perspectives. Turo will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, as applicable. We welcome candidates with physical, mental, and/or neurological disabilities. If you require assistance applying for an open position, or need accommodation during the recruiting process due to a disability, please submit a request to People Operations by emailing PeopleOps turo.com.

Requirements

Must-haves

About the team
The successful candidate will be a subject matter expert in these domains, possess a proactive mindset for staying ahead of potential threats, and serve as a technical mentor to junior team members.
What you will do Lead the architecture and implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models.
Architect, develop, and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks.
Deploy, maintain, and design policies for Data Loss Prevention (DLP) and Insider Threat prevention technologies to mitigate risks from internal and external actors.
Partner closely with IT Engineering on Identity and Access Governance solutions (e.g., Okta, IGA workflows) to enforce secure and efficient access control policies across the organization.
Lead the technical side of compliance audits, executing deep gap assessments for SOX and SOC 2 standards.
Champion and drive the adoption of Infrastructure as Code (IaC) specifically using Terraform, to automate security configurations across the enterprise cloud stack.
Lead Incident Response efforts for enterprise security, developing advanced automation playbooks (e.g., Tines), conducting root-cause analyses, and guiding the incident response team during critical events.
Establish and maintain a robust SaaS Security Posture to ensure third-party services are securely integrated.
Mentor and provide technical guidance to mid-level security engineers and IT partners.
Your profile 5 years of experience in enterprise security, with a proven track record in Zero Trust, DLP, and Endpoint Security.
Proven experience in architecture design and hands-on deployment of enterprise-wide security platforms.
High proficiency in scripting and automating custom security processes using Python, Go, or PowerShell.
Advanced experience with configuration management and infrastructure as code tools (e.g., Terraform).
Benefits Competitive salary, equity, benefits, and perks for all full-time employees
Retirement employer match
Learning & Development stipend to invest in your professional development
Turo host matching program
Turo travel credit
For those who are in the office full-time or hybrid we have in-office lunch, office snacks, and fun activities
We are committed to building a diverse team. If you are from a background that s underrepresented in tech, we d love to meet you.

Nice-to-haves

Industry certifications such as CISSP, CISM, or GIAC are highly preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythongoai

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

Paid Time Off

Parental Leave

Professional Development